Lucene search
+L

27 matches found

Mend
Mend
•added 2022/04/18 4:20 p.m.•7 views

CVE-2021-3503

A flaw was found in Wildfly where insufficient RBAC restrictions may lead to expose metrics data. The highest threat from this vulnerability is to the confidentiality...

5.3CVSS0.01089EPSS
SaveExploits0References8
CVE
CVE
•added 2022/04/18 4:20 p.m.•128 views

CVE-2021-3503

This CVE (CVE-2021-3503) concerns WildFly where insufficient RBAC restrictions may allow exposure of metrics data, affecting confidentiality. Affected software is WildFly; the root cause is RBAC misconfiguration that enables unauthorized access to metrics. Publicly documented impacts indicate pot...

4.3CVSS4.3AI score0.01089EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
•added 2022/04/18 12:00 a.m.•17 views

PT-2022-10386 · Wildfly · Wildfly

Name of the Vulnerable Software and Affected Versions: Wildfly affected versions not specified Description: A flaw was found in Wildfly where insufficient RBAC restrictions may lead to expose metrics data. The highest threat from this vulnerability is to the confidentiality. Recommendations: At t...

4.3CVSS4.3AI score0.01089EPSS
SaveExploits0References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/18 12:00 a.m.•6 views

CVE-2021-3503: Exposure of Sensitive Information to an Unauthorized Actor

A flaw was found in Wildfly where insufficient RBAC restrictions may lead to expose metrics data. The highest threat from this vulnerability is to the confidentiality...

4.3CVSS5.5AI score0.01089EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/04/13 12:00 a.m.•23 views

SAP Netweaver 访问控制错误漏洞

SAP Netweaver is the German SAP SAP company's set of service-oriented integration of the application platform, the platform mainly for SAP applications to provide a development environment. The platform mainly for SAP applications to provide a development and runtime environment.SAP NetWeaver...

6.5CVSS5.7AI score0.00635EPSS
SaveExploits0References4
CVE
CVE
•added 2019/09/16 4:53 p.m.•125 views

CVE-2019-15727

CVE-2019-15727 affects GitLab Community and Enterprise Edition 11.2 through 12.2.1. The issue is insufficient permission checks when displaying CI results, which could disclose CI metrics data to unauthorized users. Public details from multiple sources confirm the vulnerability and its impact on ...

5.3CVSS5.2AI score0.01544EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2019/09/16 12:00 a.m.•3 views

PT-2019-14349

Name of the Vulnerable Software and Affected Versions GitLab Community and Enterprise Edition versions 11.2 through 12.2.1 Description An issue was discovered where insufficient permission checks were applied when displaying CI results. This could potentially expose some CI metrics data to...

5.3CVSS0.01544EPSS
SaveExploits0References6
Rows per page
Query Builder